In the Claims : 

Please cancel claims 10-12 without prejudice or disclaimer, amend claims 1-9, and add 
new claims 14-21 as follows: 

1. (Currently amended) A connection management apparatus conn e ctabl e — via — a 
communication network to be coupled to [[both]] a first gateway belonging to a first 
network and connecting to a first terminal [[and]] a second gateway belonging to a 
second network connecting to a second terminal, and a third gateway belonging to a third 
network , comprising: 

a transmission/reception unit connectable to said communication first, second and 
third networks; and 

a CPU connected to said communication n e twork; and transmission/reception 

unit, 

a m e mory conn e cted to said transmission/r e c e ption unit and further conn e ct e d to 
said CPU; wherein: 

when a connection request issued from said first terminal to said second terminal 
is received by said transmission/reception unit, said CPU r e ads out a program from said 
m e mory and e x e cut e s th e program to judges whether or not a first connection [[can]] 
directly between the first and second networks is permitted under a predetermined 
connection restriction between networks to be established from said first terminal to said 
second terminal; [[and]] 

when said first connection cannot is not permitted to be established directly from 
said first network to said second network as a result of said judgment, said CPU 
furth e rmore r e ads out a program from said memory and e x e cut e s th e program to 
generates an address r e quir e d for e stablishing identifying a second connection including 
said first gateway, said second gateway and said third gateway, which are connectable 
from the first terminal to said second terminal, a s e cond conn e ction by which said first 
t e rminal is conn e ctabl e conn e ct e d to said s e cond t e rminal and then [[to]] said CPU 
transmits a data containing said generated address from said transmission/reception unit 
to said first terminal , and transmits an address registration request containing said 
generated address from said transmission/reception unit to said first gateway and said 
third gateway for starting the second connection from said first terminal to said second 
terminal via said third gateway; and 
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when a notification notifying that said second connection has finished is received 
by said transmission/reception unit from said first terminal, said CPU transmits an 
address deletion request contained in said address registration request from said 
transmission/reception unit to said first gateway and said third gateway . 

2. (Currently amended) A connection management apparatus as claimed in claim 1, further 
comprising a memory connected to said CPU, wherein[[:]] 

said memory stores a database for judging as to whether or not the first 
connection from the first terminal to the second terminal can be established; and 
said CPU executes said judgment by employing said database. 

3. (Currently amended) A connection management apparatus as claimed in claim 1, 
wherein[[:]] 

when said first connection cannot is not permitted to be established as judged a 
result of th e judgm e nt , said CPU furth e r r e ads out a program from said memory and 
e x e cut e s th e program to retrieve s the second an anoth e r communication path of said 
second connection from said first terminal to said second terminal; and 

[[only]] when said anoth e r the second communication path is available in said 
m e mory and retrieved accordingly, said CPU e x e cut e s th e program and generates said 
address. 



4. (Currently amended) A connection management apparatus as claimed in claim 1 5 
wherein[[:]] when said first connection cannot is not permitted to be established as 
judged a result of th e judgment [[the]] said CPU notifies such a fact to said first 
terminal[[;]] a and furthermore, the CPU generates said address after a request has been 
issued from said first terminal. 



5. (Currently amended) A connection management apparatus as claimed in claim [[1]] 2, 
wherein[[:]] when said first connection [[can]] is permitted to be established as judged a 
result of the judgment , said CPU further reads out a program from said memory and 
executes the program to authenticate said first terminal and [[then]] generates said 
address after authentication of said first terminal is succeeded. 
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6. (Currently amended) A connection control system conn e ct e d via a communication 
n e twork to be coupled to both a first terminal and a second terminal a first a gateway 
belonging to a first network and connecting to a first terminal, a second gateway 
belonging to a second network and connecting to a second terminal, and a third gateway 
belonging to a third network , comprising: 

a connection control apparatus and an address generation apparatus, each of 
which is compris e d of: a transmission/reception unit connected to said communication 
network, a CPU conn e ct e d to said communication n e twork, and a m e mory conn e ct e d to 
said transmission/r e c e ption unit and further connect e d to said CPU, including a first 
transmission/reception unit connected to said first, second and third networks and a first 
processor connected to said first transmission/reception unit; and 

an address generation apparatus including a second transmission/reception unit 
connected to said first, second and third networks and a second processor connected to 
said second transmission/reception unit, wherein[[:]] 

in said conn e ction control apparatus, when a connection request issued from said 
first terminal to said second terminal is received by said first transmission/reception unit a 
said first processor judges whether or not a first connection directly between the first and 
second networks is permitted under a predetermined connection restriction between 
networks to be established from said first terminal to said second terminal, of said 
conn e ction control apparatus r e ads out a program from said memory and e x e cut e s th e 
program to judge to wh e th e r or not a conn e ction can b e establish e d from said first 
t e rminal to said s e cond termi nal and 

when said first connection cannot is not permitted to be established directly from 
said first network to said second network as a result of said judgment, said CPU of said 
conn e ction control apparatus first transmission/reception unit transmits a generation 
request for generating an address required for establishing a second connection by which 
said first terminal [[can]] is permitted to be connected to said second terminal via said 
third gateway to said address generation apparatus, from said transmission/reception unit 
of said connection control apparatus; and wh e r e in: 

in said addr e ss g e neration apparatus, th e said second transmission/reception unit 
of said address g e n e ration apparatus receives said generation request for generating said 
address[[:]] . said second processor generates an address identifying said first gateway, 
said second gateway and said third gateway via which a second connection between said 
first terminal and said second terminal is permitted to be established, and said second 
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transmission/reception unit transmits a data containing said generated address to said 
first terminal and then transmits an address registration request containing said generated 
address to said first gateway and said third gateway for starting the second connection; 
and 

when an notification notifying that said second connection has finished is 
received by a transmission/reception unit of said address generation apparatus from said 
first terminal, said second transmission/receptions unit transmits an address deletion 
request contained in said address registration request to said first gateway and said third 
gateway the CPU of said addr e ss g e neration apparatus r e ads out a program from said 
m e mory of th e addr e ss g e n e ration apparatus and executes the program to g e n e rat e said 
addr e ss r e quir e d for e stablishing a s e cond conn e ction by which said first t e rminal can b e 
connected to said s e cond terminal; and said CPU of th e addr e ss g e n e ration apparatus 
transmits data containing said g e n e rat e d address from th e transmission/reception unit of 
said addr e ss g e n e ration apparatus to said first t e rminal , 

7. (Currently amended) A connection control system as claimed in claim 6, wherein[[:]] 

when said first connection cannot is not permitted to be established as judged by 
a result of said judgment made in said conn e ction control apparatus first processor, said 
CPU of said conn e ction control apparatus first processor further r e ads out a program 
from said m e mory of the connection control apparatus and e x e cut e s the program to 
retrieve s an another [[a]] communication path of said second connection from said first 
terminal to said second terminal; and 

[[only]] when said another communication path of said second connection is 
available in said memory of th e conn e ction control apparatus and retrieved accordingly, 
the CPU of th e conn e ction control apparatus said first transmission/reception unit 
transmits said generation request for generating said address required for establishing 
[[a]] said second connection by which said first terminal can be connected to said second 
terminal from th e transmission/r e c e ption unit of said conn e ction control apparatus to said 
address generation apparatus. 

8. A connection control system as claimed in claim 6, wherein[[:]] when said first 
connection cannot is not permitted to be established as judged by a r e sult of said 
judgm e nt mad e in the conn e ction control apparatus said first processor , said connection 
control apparatus notifies such a fact to said first terminal; and furthermore, said address 
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generation apparatus generates said address connectable to said second terminal after a 
request has been issued from said first terminal. 

9. (Currently amended) A connection control system as claim in claim [[6]] 7, wherein [[:]] 
said conn e ction control system is furth e r compris e d of: 

an — authentication — apparatus — e quipped — with — a — transmission/r e ception — umt 
conn e ct e d to said communication n e twork; a CPU conn e ct e d to said communication 
network; and a memory conn e ct e d to said transmission/reception unit and further 
conn e ct e d to said CPU; wher e in: 

when said first connection ea» is not permitted to be established as judged by a 
result of th e judgm e nt mad e in said first processor conn e ction control apparatus, th e CPU 
of said auth e ntication apparatus r e ads out a program from said memory of said 
authentication apparatus and e x e cut e s th e program to auth e nticat e said first t e rminal; and 
furth e r , said connection control apparatus notifies such a fact to said first terminal, and 
said address generation apparatus generates said address connectable to said second 
terminal after a request has been issued from said first terminal said address g e n e ration 
apparatus g e n e rat e s said addr e s s aft e r said authentication apparatus — succe e ds in 
auth e ntication of said fir s t t e rm mat. 

10-12. (Cancelled) 

13. (New) A connection management apparatus as claimed in claim 2, wherein when said 
first connection is not permitted to be established as judged, said CPU notifies such a 
fact to said first terminal, and said CPU generates said address after a request has been 
issued from said first terminal. 

14. (New) A connection management apparatus as claimed in claim 3, wherein when said 
first connection is permitted to be established as judged, said CPU reads out a program 
from a memory connected to said CPU and executes the program to authenticate said 
first terminal, and generates said address after authentication of said first terminal is 
succeeded. 

15. (New) A connection control system as claimed in claim 6, further comprising an 
authentication apparatus which includes a third transmission/reception unit connected to 



said first, second and third networks a third processor and a memory, and said third 
processor and said memory are connected to said third transmission/reception unit and to 
each other, 

wherein when said first connection is permitted to be established as judged in 
said connection control apparatus, said third processor executes the authentication of said 
first terminal and then said address generation apparatus generates said address 
connectable to said second terminal after authentication of said first terminal is 
succeeded. 

16. (New) A connection control system as claimed in claim 7, further comprising an 
authentication apparatus which includes a third processor, a memory and a third 
transmission/reception unit connected to said first, second and third networks, and said 
third processor and said memory being connected to said third transmission/reception 
unit and to each other, 

wherein when said first connection is permitted to be established as judged in 
said connection control apparatus, said third processor executes the authentication of said 
first terminal and then said address generation apparatus generates said address 
connectable to said second terminal after authentication of said first terminal is 
succeeded. 

17. (New) A connection control system as claimed in claim 8, further comprising an 
authentication apparatus which includes a third transmission/reception unit connected to 
said first, second and third networks, a third processor and a memory, and said third 
processor and said memory are connected to said third transmission/reception unit and to 
each other, 

wherein when said first connection is permitted to be established as judged in 
said connection control apparatus, said third processor executes the authentication of said 
first terminal and then said address generation apparatus generates said address 
connectable to said second terminal after authentication of said first terminal is 
succeeded. 

18. (New) A connection management apparatus as claimed in claim 1, wherein the 
predetermined connection restriction between networks is applicable to all terminals 
belonging to the networks. 
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(New) A connection control system as claimed in claim 6, wherein the predetermined 
connection restriction between networks is applicable to all terminals belonging to the 
networks. 



20. (New) A connection management apparatus as claimed in claim 5, wherein prior to 
establishing the second connection, the authentication apparatus executes authentication 
of said first terminal and ensures that said first terminal is authorized to connect to the 
first, second and third gateways constituting said second connection. 

21. (New) A connection control system as claimed in claim 15, wherein prior to establishing 
the second connection, said third processor of the authentication apparatus executes 
authentication of said first terminal and ensures that said first terminal is authorized to 
connect to the first, second and third gateways constituting said second connection. 



